Security

Reply
Occasional Contributor II

ClearPass Licensing Limitation

Hi all,

 

do we have any possibility with the new ClearPass Licensing model to assign licenses for certain authentications?

Use case: A customer had 100 Guest licenses and a 500-VA-appliance. This was migrated to 600 Access licenses. From time to time, the customer has more than 200 guests in the network but needs 400 licenses for the internal authentications.

Any possibility to cut guests after a defined threshold to avoid failing internal authentications?

Anything planned in this direction?

 

Thanks

Michael

Guru Elite

Re: ClearPass Licensing Limitation

There are no hard caps for Guest or authentications. Also, in ClearPass 6.7, the guest license is gone.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Regular Contributor I

Re: ClearPass Licensing Limitation

Hi Michael,

 

You could look at limiting it on the Guest SSID.

 

On a Aruba Controller you can set the 'Max Associations' (default is 64).

On a Aruba Instant you can set the 'Max Client threshold' (default is 64)

These are the max clients on the SSID. Note: An Aruba AP can support up to max 255 clients per Radio.

 

Hope this helps.

 

 

Cheers, Frank
Aruba Partner Ambassador| AMFX#22| ACCX#613| ACMX#733| ACDX#744

If you like my posts, kudo's are welcome. If it solves your problem, please click 'Accept as Solution'
Occasional Contributor II

Re: ClearPass Licensing Limitation

The max stations does not solve the issue as it is on an AP basis and not on the authetnication (guests) in the overall SSID.

How can we take this as an PER?

 

I just need to ensure that all internal stations will be authenticated while guests may be rejected if the concurrent license limit is reached.

Guru Elite

Re: ClearPass Licensing Limitation

Please post a request for enhancement here: https://innovate.arubanetworks.com/portal_session/new

 

There is not currently a way to do what you want to do.

******************
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
******************
Guru Elite

Re: ClearPass Licensing Limitation

You do NOT need to do this. ClearPass does not have a hard license cap.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor II

Re: ClearPass Licensing Limitation

What happens after the license count is reached in R6.7?

Guru Elite

Re: ClearPass Licensing Limitation

In both 6.6 and 6.7, there are no hard caps. You will receive administrative warnings that the license has exceeded but authentication will always continue. Also keep in mind that in 6.7, there is no difference between a guest and regular user.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor I

Re: ClearPass Licensing Limitation

Hi Michael,

 

For 6.7, guest license gone and license user is in pool. Clearpass will count in concurrent and release when it out.

For this, I think you can receive the maximum is 525 access and you must buy 100 access to cover the requirement.


Thank you,
Ratchapas S.
Regular Contributor I

Re: ClearPass Licensing Limitation

Hi

The customer will get more then 525!

He has an CP-VA500, so that will become 525 AL
Then he has 100 guest, that will become 100 AL

So 625 AL in total, if I am correct.

Cheers, Frank
Aruba Partner Ambassador| AMFX#22| ACCX#613| ACMX#733| ACDX#744

If you like my posts, kudo's are welcome. If it solves your problem, please click 'Accept as Solution'
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: